@timurproko/a1 0.1.0

package/dist/src/foundation/workspace-contracts/validation.js

@@ -0,0 +1,336 @@
+import { NATIVE_HOST_PROTOCOL_VERSION, WORKSPACE_CONTRACT_VERSION } from "./model.js";
+const MAX_ID_LENGTH = 128;
+const MAX_LABEL_LENGTH = 256;
+const MAX_COLLECTION_LENGTH = 10_000;
+const MAX_ENVIRONMENT_ENTRIES = 512;
+const MAX_ARGUMENTS = 1_024;
+const MAX_POSITION = Number.MAX_SAFE_INTEGER;
+const MAX_LIMIT = 1_000_000_000;
+export function assertManagedAgentDescriptor(agent) {
+    assertId(agent.id, "agent id");
+    assertText(agent.displayName, "agent display name", MAX_LABEL_LENGTH);
+    assertId(agent.adapterId, "adapter id");
+    assertIsoDate(agent.createdAt, "agent creation time");
+    if (agent.recoveryReferenceId !== null)
+        assertId(agent.recoveryReferenceId, "recovery reference id");
+    assertAgentCapability(agent.capability);
+    if (agent.runtime !== agent.capability.kind)
+        throw new TypeError("agent runtime must match its capability kind");
+}
+export function assertAgentCapability(capability) {
+    if (capability.kind === "structured") {
+        assertStructuredCapability(capability);
+        return;
+    }
+    assertComposedTerminalCapability(capability);
+}
+export function assertStructuredCapability(capability) {
+    if (capability.protocolVersion !== WORKSPACE_CONTRACT_VERSION)
+        throw new TypeError("unsupported structured protocol version");
+    assertId(capability.adapterId, "structured adapter id");
+    assertUniqueText(capability.commands, "structured commands");
+    assertUniqueText(capability.eventTypes, "structured event types");
+    assertUniqueText(capability.attachmentTypes, "structured attachment types");
+    if (capability.resume === "position" && capability.snapshots === "none") {
+        throw new TypeError("position resume requires authoritative snapshots for gap recovery");
+    }
+    if (capability.resume === "snapshot" && capability.snapshots !== "authoritative") {
+        throw new TypeError("snapshot resume requires authoritative snapshots");
+    }
+    for (const [name, value] of Object.entries(capability.flow))
+        assertBoundedPositiveInteger(value, `structured flow ${name}`);
+}
+export function assertComposedTerminalCapability(capability) {
+    if (capability.protocolVersion !== NATIVE_HOST_PROTOCOL_VERSION)
+        throw new TypeError("unsupported native-host protocol version");
+    assertId(capability.hostInstanceId, "native host instance id");
+    assertRevision(capability.topologyRevision, "topology revision");
+}
+export function assertWorkspaceSnapshot(snapshot) {
+    if (snapshot.contractVersion !== WORKSPACE_CONTRACT_VERSION)
+        throw new TypeError("unsupported workspace contract version");
+    assertId(snapshot.workspaceId, "workspace id");
+    assertRevision(snapshot.revision, "workspace revision");
+    assertCollection(snapshot.agents, "workspace agents");
+    const ids = new Set();
+    for (const agent of snapshot.agents) {
+        assertManagedAgentDescriptor(agent);
+        if (ids.has(agent.id))
+            throw new TypeError(`duplicate agent id: ${agent.id}`);
+        ids.add(agent.id);
+    }
+    if (snapshot.selectedAgentId !== null && !ids.has(snapshot.selectedAgentId)) {
+        throw new TypeError("selected agent must exist in the workspace snapshot");
+    }
+}
+export function assertWorkspaceCommand(command) {
+    assertId(command.correlationId, "command correlation id");
+    switch (command.type) {
+        case "create-agent":
+            assertManagedAgentDescriptor(command.agent);
+            return;
+        case "select-agent":
+        case "stop-agent":
+        case "restart-agent":
+        case "remove-agent":
+            assertId(command.agentId, "command agent id");
+            return;
+        case "rename-agent":
+            assertId(command.agentId, "command agent id");
+            assertText(command.displayName, "agent display name", MAX_LABEL_LENGTH);
+            return;
+        case "structured-command":
+            assertId(command.agentId, "command agent id");
+            assertId(command.command, "structured command name");
+            assertJsonValue(command.payload, "structured command payload");
+            return;
+        case "cancel-structured-command":
+            assertId(command.agentId, "command agent id");
+            assertId(command.targetCorrelationId, "target command correlation id");
+    }
+}
+export function assertWorkspaceEvent(event) {
+    assertId(event.agentId, "event agent id");
+    switch (event.type) {
+        case "agent-lifecycle":
+            assertPosition(event.position, "lifecycle event position");
+            return;
+        case "structured-event":
+            assertPosition(event.position, "structured event position");
+            assertId(event.eventType, "structured event type");
+            assertJsonValue(event.payload, "structured event payload");
+            return;
+        case "command-outcome":
+            assertId(event.correlationId, "command correlation id");
+            return;
+        case "terminal-topology":
+            assertTerminalTopologySnapshot(event.topology);
+            return;
+        case "recovery-discontinuity":
+            assertText(event.reason, "recovery discontinuity reason", 4_096);
+    }
+}
+export function assertStructuredAgentSnapshot(snapshot) {
+    if (snapshot.contractVersion !== WORKSPACE_CONTRACT_VERSION)
+        throw new TypeError("unsupported structured snapshot contract version");
+    assertId(snapshot.agentId, "structured snapshot agent id");
+    assertId(snapshot.snapshotId, "structured snapshot id");
+    assertPosition(snapshot.position, "structured snapshot position");
+    if (snapshot.authoritative !== true)
+        throw new TypeError("structured snapshot must be authoritative");
+    assertJsonValue(snapshot.payload, "structured snapshot payload");
+}
+export function assertTerminalTopologySnapshot(topology) {
+    assertId(topology.hostInstanceId, "native host instance id");
+    assertRevision(topology.revision, "topology revision");
+    assertCollection(topology.windows, "terminal windows");
+    assertCollection(topology.sessions, "terminal sessions");
+    const sessionIds = new Set();
+    for (const session of topology.sessions) {
+        assertTerminalSessionLaunch(session);
+        if (sessionIds.has(session.id))
+            throw new TypeError(`duplicate terminal session id: ${session.id}`);
+        sessionIds.add(session.id);
+    }
+    const windowIds = new Set();
+    const paneIds = new Set();
+    for (const window of topology.windows) {
+        assertId(window.id, "terminal window id");
+        if (windowIds.has(window.id))
+            throw new TypeError(`duplicate terminal window id: ${window.id}`);
+        windowIds.add(window.id);
+        assertCollection(window.tabs, "terminal tabs");
+        if (!window.tabs.some(tab => tab.id === window.activeTabId))
+            throw new TypeError("active tab must exist in its window");
+        const tabIds = new Set();
+        for (const tab of window.tabs) {
+            if (tabIds.has(tab.id))
+                throw new TypeError(`duplicate terminal tab id in window: ${tab.id}`);
+            tabIds.add(tab.id);
+            assertTerminalTab(tab, sessionIds, paneIds);
+        }
+    }
+}
+export function assertNativeHostCommand(command) {
+    assertId(command.correlationId, "native-host correlation id");
+    if (command.type === "apply-topology") {
+        assertRevision(command.expectedRevision, "expected topology revision");
+        assertTerminalTopologySnapshot(command.topology);
+        if (command.topology.revision !== command.expectedRevision) {
+            throw new TypeError("applied topology snapshot revision must equal the expected revision");
+        }
+        return;
+    }
+    if (command.type === "focus-pane" || command.type === "close-pane") {
+        assertRevision(command.expectedRevision, "expected topology revision");
+        assertId(command.paneId, "terminal pane id");
+    }
+}
+export function assertRecoveryAuthority(authority) {
+    assertId(authority.referenceId, "recovery reference id");
+    assertId(authority.agentId, "recovery agent id");
+    assertText(authority.processIdentity, "recovery process identity", 1_024);
+    if (authority.kind === "structured") {
+        assertId(authority.adapterId, "recovery adapter id");
+        assertText(authority.ownershipProof, "recovery ownership proof", 4_096);
+        if (authority.boundary.kind === "position") {
+            assertPosition(authority.boundary.position, "resume position");
+            assertText(authority.boundary.resumeToken, "resume token", 4_096);
+        }
+        else {
+            assertId(authority.boundary.snapshotId, "recovery snapshot id");
+        }
+        return;
+    }
+    assertId(authority.hostInstanceId, "recovery host instance id");
+    assertText(authority.hostBuildId, "recovery host build id", 1_024);
+    assertText(authority.pseudoterminalIdentity, "recovery pseudoterminal identity", 1_024);
+    assertText(authority.retainedStateIdentity, "recovery retained-state identity", 1_024);
+    assertRevision(authority.topologyRevision, "recovery topology revision");
+    assertPosition(authority.streamPosition, "recovery stream position");
+}
+export function assertTerminalSessionLaunch(session) {
+    assertId(session.id, "terminal session id");
+    assertText(session.executable, "terminal executable", 32_768);
+    assertText(session.cwd, "terminal working directory", 32_768);
+    if (session.executable.includes("\0") || session.cwd.includes("\0"))
+        throw new TypeError("terminal launch paths contain a null byte");
+    assertCollection(session.arguments, "terminal arguments", MAX_ARGUMENTS);
+    if (session.arguments.some(argument => typeof argument !== "string" || argument.includes("\0"))) {
+        throw new TypeError("terminal arguments contain an invalid value");
+    }
+    const entries = Object.entries(session.environment);
+    assertCollection(entries, "terminal environment", MAX_ENVIRONMENT_ENTRIES);
+    if (entries.some(([name, value]) => !name || name.includes("=") || name.includes("\0") || typeof value !== "string" || value.includes("\0"))) {
+        throw new TypeError("terminal environment contains an invalid name or value");
+    }
+    assertTerminalDimensions(session.dimensions);
+}
+function assertTerminalDimensions(dimensions) {
+    assertIntegerInRange(dimensions.columns, 2, 500, "terminal columns");
+    assertIntegerInRange(dimensions.rows, 1, 300, "terminal rows");
+    assertIntegerInRange(dimensions.widthPixels, 1, 100_000, "terminal pixel width");
+    assertIntegerInRange(dimensions.heightPixels, 1, 100_000, "terminal pixel height");
+}
+function assertTerminalTab(tab, sessionIds, globalPaneIds) {
+    assertId(tab.id, "terminal tab id");
+    assertCollection(tab.nodes, "terminal topology nodes");
+    assertCollection(tab.panes, "terminal panes");
+    const paneIds = new Set();
+    for (const pane of tab.panes) {
+        assertId(pane.id, "terminal pane id");
+        assertId(pane.sessionId, "terminal pane session id");
+        if (paneIds.has(pane.id) || globalPaneIds.has(pane.id))
+            throw new TypeError(`duplicate terminal pane id: ${pane.id}`);
+        if (!sessionIds.has(pane.sessionId))
+            throw new TypeError(`terminal pane references missing session: ${pane.sessionId}`);
+        paneIds.add(pane.id);
+        globalPaneIds.add(pane.id);
+    }
+    if (!paneIds.has(tab.focusedPaneId))
+        throw new TypeError("focused pane must exist in its tab");
+    const nodes = new Map();
+    for (const node of tab.nodes) {
+        assertId(node.id, "terminal topology node id");
+        if (nodes.has(node.id))
+            throw new TypeError(`duplicate terminal topology node id: ${node.id}`);
+        if (node.kind === "leaf") {
+            if (!paneIds.has(node.paneId))
+                throw new TypeError(`terminal leaf references missing pane: ${node.paneId}`);
+        }
+        else {
+            if (!(node.ratio > 0 && node.ratio < 1 && Number.isFinite(node.ratio)))
+                throw new RangeError("terminal split ratio must be between zero and one");
+            if (node.first === node.second || node.id === node.first || node.id === node.second)
+                throw new TypeError("terminal split cannot reference itself or duplicate a child");
+        }
+        nodes.set(node.id, node);
+    }
+    if (!nodes.has(tab.rootNodeId))
+        throw new TypeError("terminal tab root node is missing");
+    const visited = new Set();
+    const visiting = new Set();
+    const reachedPanes = new Set();
+    visitNode(tab.rootNodeId, nodes, visited, visiting, reachedPanes);
+    if (visited.size !== nodes.size)
+        throw new TypeError("terminal tab contains unreachable topology nodes");
+    if (reachedPanes.size !== paneIds.size || [...paneIds].some(paneId => !reachedPanes.has(paneId))) {
+        throw new TypeError("each terminal pane must appear exactly once in the split tree");
+    }
+}
+function visitNode(id, nodes, visited, visiting, reachedPanes) {
+    const node = nodes.get(id);
+    if (!node)
+        throw new TypeError(`terminal split references missing node: ${id}`);
+    if (visiting.has(id))
+        throw new TypeError("terminal topology contains a cycle");
+    if (visited.has(id))
+        throw new TypeError("terminal topology node has multiple parents");
+    visiting.add(id);
+    if (node.kind === "leaf") {
+        if (reachedPanes.has(node.paneId))
+            throw new TypeError("terminal pane appears more than once in the split tree");
+        reachedPanes.add(node.paneId);
+    }
+    else {
+        visitNode(node.first, nodes, visited, visiting, reachedPanes);
+        visitNode(node.second, nodes, visited, visiting, reachedPanes);
+    }
+    visiting.delete(id);
+    visited.add(id);
+}
+function assertUniqueText(values, name) {
+    assertCollection(values, name);
+    const seen = new Set();
+    for (const value of values) {
+        assertId(value, name);
+        if (seen.has(value))
+            throw new TypeError(`${name} contains a duplicate: ${value}`);
+        seen.add(value);
+    }
+}
+function assertJsonValue(value, name) {
+    try {
+        const encoded = JSON.stringify(value);
+        if (encoded === undefined)
+            throw new TypeError();
+    }
+    catch {
+        throw new TypeError(`${name} must be JSON serializable`);
+    }
+}
+function assertCollection(value, name, maximum = MAX_COLLECTION_LENGTH) {
+    if (!Array.isArray(value) || value.length > maximum)
+        throw new RangeError(`${name} exceeds its maximum length`);
+}
+function assertId(value, name) {
+    assertText(value, name, MAX_ID_LENGTH);
+    if (!/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(value))
+        throw new TypeError(`${name} contains unsupported characters`);
+}
+function assertText(value, name, maximum) {
+    if (typeof value !== "string" || value.length === 0 || value.length > maximum || value.includes("\0")) {
+        throw new TypeError(`${name} is invalid`);
+    }
+}
+function assertIsoDate(value, name) {
+    assertText(value, name, 64);
+    if (!Number.isFinite(Date.parse(value)))
+        throw new TypeError(`${name} is not an ISO timestamp`);
+}
+function assertRevision(value, name) {
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new RangeError(`${name} must be a non-negative safe integer`);
+}
+function assertPosition(value, name) {
+    assertIntegerInRange(value, 0, MAX_POSITION, name);
+}
+function assertBoundedPositiveInteger(value, name) {
+    assertIntegerInRange(value, 1, MAX_LIMIT, name);
+}
+function assertIntegerInRange(value, minimum, maximum, name) {
+    if (!Number.isSafeInteger(value) || value < minimum || value > maximum) {
+        throw new RangeError(`${name} must be an integer from ${minimum} to ${maximum}`);
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/src/foundation/workspace-contracts/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../src/foundation/workspace-contracts/validation.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,gBAAgB,CAAC;AAC7C,MAAM,SAAS,GAAG,aAAa,CAAC;AAEhC,MAAM,UAAU,4BAA4B,CAAC,KAA6B;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/B,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;IACtE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IACxC,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,mBAAmB,KAAK,IAAI;QAAE,QAAQ,CAAC,KAAK,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;IACrG,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAmC;IACvE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACrC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,gCAAgC,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,UAAwC;IACjF,IAAI,UAAU,CAAC,eAAe,KAAK,0BAA0B;QAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IAC9H,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IACxD,gBAAgB,CAAC,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC7D,gBAAgB,CAAC,UAAU,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAClE,gBAAgB,CAAC,UAAU,CAAC,eAAe,EAAE,6BAA6B,CAAC,CAAC;IAC5E,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;QACjF,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,4BAA4B,CAAC,KAAK,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,UAA8C;IAC7F,IAAI,UAAU,CAAC,eAAe,KAAK,4BAA4B;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACjI,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;IAC/D,cAAc,CAAC,UAAU,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAA2B;IACjE,IAAI,QAAQ,CAAC,eAAe,KAAK,0BAA0B;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAC3H,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAC/C,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACxD,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpC,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9E,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAyB;IAC9D,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;IAC1D,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,cAAc;YACjB,4BAA4B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO;QACT,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,eAAe,CAAC;QACrB,KAAK,cAAc;YACjB,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC9C,OAAO;QACT,KAAK,cAAc;YACjB,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC9C,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;YACxE,OAAO;QACT,KAAK,oBAAoB;YACvB,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC9C,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;YACrD,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;YAC/D,OAAO;QACT,KAAK,2BAA2B;YAC9B,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;YAC9C,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC1C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB;YACpB,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;YAC3D,OAAO;QACT,KAAK,kBAAkB;YACrB,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;YAC5D,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;YACnD,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;YAC3D,OAAO;QACT,KAAK,iBAAiB;YACpB,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;YACxD,OAAO;QACT,KAAK,mBAAmB;YACtB,8BAA8B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/C,OAAO;QACT,KAAK,wBAAwB;YAC3B,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAiC;IAC7E,IAAI,QAAQ,CAAC,eAAe,KAAK,0BAA0B;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACrI,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IAC3D,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACxD,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;IAClE,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACtG,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,QAAkC;IAC/E,QAAQ,CAAC,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC;IAC7D,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IACvD,gBAAgB,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACvD,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAEzD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACxH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACnB,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACtC,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;QACvE,8BAA8B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC3D,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACnE,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;QACvE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,SAAiC;IACvE,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;IACzD,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACjD,UAAU,CAAC,SAAS,CAAC,eAAe,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAC;IAC1E,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACpC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;QACrD,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC3C,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;YAC/D,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAClE,CAAC;QACD,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IAChE,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACnE,UAAU,CAAC,SAAS,CAAC,sBAAsB,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;IACxF,UAAU,CAAC,SAAS,CAAC,qBAAqB,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;IACvF,cAAc,CAAC,SAAS,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;IACzE,cAAc,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAA8B;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAC5C,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9D,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,4BAA4B,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACtI,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACpD,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7I,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,wBAAwB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,wBAAwB,CAAC,UAA8B;IAC9D,oBAAoB,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACrE,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;IAC/D,oBAAoB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACjF,oBAAoB,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAgB,EAAE,UAA+B,EAAE,aAA0B;IACtG,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACpC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,yBAAyB,CAAC,CAAC;IACvD,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACtC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACtH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACxH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAE/F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9G,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,mDAAmD,CAAC,CAAC;YAClJ,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;QAC1K,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IACzF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IACzG,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,KAAgD,EAChD,OAAoB,EACpB,QAAqB,EACrB,YAAyB;IAEzB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACxF,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QACjH,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC9D,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACjE,CAAC;IACD,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyB,EAAE,IAAY;IAC/D,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,KAAK,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,IAAY,EAAE,OAAO,GAAG,qBAAqB;IAChG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,OAAe;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtG,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IAChD,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY;IACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;AACrH,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY;IACjD,oBAAoB,CAAC,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa,EAAE,IAAY;IAC/D,oBAAoB,CAAC,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,OAAe,EAAE,OAAe,EAAE,IAAY;IACzF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACvE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,4BAA4B,OAAO,OAAO,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC"}

package/docs/architecture/boundaries.md

@@ -0,0 +1,46 @@
+# Architecture boundaries
+
+## Terminal ownership
+
+The current interactive path is:
+
+```text
+mutable a1 entry
+  -> verified immutable release
+  -> foreground lease and broker
+  -> child with inherited physical terminal handles
+```
+
+After handoff, AddOne does not read ordinary terminal input, parse child output, render cells, infer frames, synthesize terminal responses, or emit display control. The child and physical terminal own terminal behavior. AddOne owns validated launch intent, one exclusive foreground lease, native process identity, lifecycle outcome, and bounded cleanup.
+
+Transparent mode has no AddOne-authoritative terminal surface, internal pane, virtual scrollback, inactive resident tab, or visual reconnection. A future feature that requires those properties must introduce and certify a separate composed-terminal authority; it must not weaken or silently intercept transparent mode.
+
+## Current module responsibilities
+
+- `domain`: dependency-free transparent launch, process identity, lifecycle, and lease contracts.
+- `workspace-contracts`: dependency-free multi-agent identity, capability, command/event/snapshot, terminal window/tab/pane/session topology, terminal-host, and recovery contracts.
+- `structured-agent-runtime`: planned typed event/command/snapshot runtime. It must not infer semantics from terminal text, own pseudoterminals, or reconstruct screens.
+- `native-host-protocol`: bounded typed local boundary for terminal-host identity, topology revisions, lifecycle, and recovery. Terminal bytes, per-event child input, and rendered cells are forbidden across it.
+- `protocol`: additive control handshake, bounded line framing, request identity, snapshots, command results, and foreground-lease messages. Terminal bytes and reconstructed display state are forbidden.
+- `storage`: SQLite migrations, old-generation reconciliation, and exclusive foreground-lease persistence. Historical schema tables remain readable for installed-state compatibility but do not authorize legacy product behavior.
+- `supervisor`: endpoint identity, cohort ownership, foreground leases, and release shutdown coordination. It owns no terminal surface.
+- `transparent`: generic command resolution, foreground broker, and native attached launchers.
+- release/update/bootstrap: package-derived immutable release identity, cohort selection, durable update transactions, rollback, and dependency-light command entry.
+
+## Dependency direction
+
+Terminal boundaries are application-agnostic. They may not select behavior from executable names, arguments, CLI-specific environment variables, or visible text. Production code may not import private Pi distribution APIs or use a Pi-specific terminal workaround.
+
+The repository has no production PTY or terminal-emulator dependency. Reintroducing `node-pty`, xterm state, custom input encoders, mode/query trackers, cadence-derived frame inference, or renderer/projection code requires an approved capability change and cannot enter transparent mode.
+
+`scripts/check-architecture.mjs` enforces the structural parts of these boundaries. Cross-cutting rationale belongs here; implementation history belongs in Git and archived OpenSpec changes.
+
+## Planned multi-agent boundaries
+
+The workspace feature may depend on workspace contracts and the structured/terminal-host foundations. Those foundations may depend only on dependency-free workspace contracts, never on product features, launch profiles, or each other unless an approved capability adds the dependency. Explicit launch profiles and transparent fallback may not import, initialize, launch, or connect to composed terminal-host infrastructure.
+
+The structured-agent runtime uses a versioned adapter hello and feature negotiation before readiness. Runtime state must use typed events, commands, snapshots, cancellation, and recovery evidence. It must not infer structured semantics from terminal text, terminal timing, or visual content and must not own pseudoterminals or renderer state.
+
+The terminal-host protocol boundary may carry only bounded typed control and semantic lifecycle messages. Pseudoterminal bytes, per-event child input, rendered cells, cell grids, framebuffers, and screen buffers are forbidden across it. Console host executables and packaging live outside the current JavaScript production owners and remain unavailable until the isolated in-terminal 2×2 proof passes; replacing them with a lightweight custom parser/renderer is forbidden. A desktop-native window and GPU application shell are postponed and are not required for the terminal-hosted product.
+
+Resource queues, retained state, evidence, logs, and diagnostics follow `docs/architecture/resource-and-data-policy.md`. Terminal content and authentication material are never control-store records. Unknown data is potentially sensitive by default and must be rejected or redacted before persistence.

package/docs/architecture/project-structure.md

@@ -0,0 +1,81 @@
+# Project structure
+
+Every production module has one named owner. The executable owner map and allowed dependencies live in `scripts/project-structure-policy.mjs`; this document explains the conventions behind it.
+
+## Production owners
+
+```text
+src/
+  cli/                         public command helpers and dispatch
+  features/
+    launch/                    product launch profiles and profile settings
+    workspace/                 multi-agent workspace presentation, reducer state, and persistence orchestration
+  foundation/
+    lifecycle/                 dependency-free launch/lifecycle contracts and paths
+    protocol/                  control framing and client contracts
+    release/                   immutable releases, cohorts, update, rollback, cleanup
+    storage/                   control-store persistence
+    structured-agent-runtime/  structured/RPC handshake, event, command, and recovery semantics
+    native-host-protocol/      bounded terminal-host identity, topology, lifecycle, and proof protocol
+    supervision/               endpoint and foreground-lease ownership
+    workspace-contracts/       dependency-free workspace, adapter, topology, host, and recovery contracts
+    transparent-terminal/      exact command resolution and native attachment
+```
+
+Each owner exposes `index.ts`. Imports within one owner may use private files. Imports crossing owners must use the provider's `index.ts` and follow the declared dependency DAG. Foundation modules never import product features.
+
+`src/cli` is a thin public entry layer. Product policy belongs in a named feature. Shared code moves to foundation only when it is product-agnostic, has a precise contract, and has more than one real consumer. Do not create `core`, `common`, `utils`, or `misc` dumping grounds.
+
+## Feature ownership
+
+A feature owns:
+
+- its production behavior under `src/features/<name>`;
+- its public contract in `index.ts`;
+- its settings schema/defaults and path policy;
+- its tests under `test/features/<name>`;
+- user-facing feature documentation under `docs/features/<name>.md` when the behavior needs more than README coverage.
+
+Settings files are not mandatory for every feature. Add one only when the feature owns mutable policy. User settings, credentials, sessions, caches, downloaded packages, logs, and generated files never live in source folders.
+
+## Test ownership
+
+Tests mirror their production owner:
+
+```text
+test/
+  cli/
+  features/<name>/
+  foundation/<name>/
+  repository-governance/
+```
+
+Use `.test.ts` for deterministic owner-level contracts. Use `.integration.test.ts` when the contract crosses real process, filesystem, registry, or release boundaries. Prefer the smallest independent boundary that proves the observable result; do not duplicate a stronger test or preserve historical bug-story names after the cause has a current invariant.
+
+Physical desktop automation is not an ordinary integration test. It requires a separately authorized certification change and isolated disposable infrastructure.
+
+## Repository authority
+
+The repository has one root `package.json`, `package-lock.json`, TypeScript configuration, Vitest configuration, and dependency installation. Nested manifests, lockfiles, `node_modules`, vendored package caches, logs, sessions, browser profiles, generated output, and runtime state are forbidden under production and feature trees.
+
+Build output belongs in ignored `dist/`; release/test evidence belongs in ignored `artifacts/`. Package contents are selected by the root manifest. Native proof code lives under `native/terminal-host/`; its Cargo build output and vendored Zig build output are ignored, and it remains a console terminal host rather than a desktop application.
+
+## Documentation and comments
+
+- README explains installation, commands, and current limitations.
+- `docs/architecture` explains cross-cutting ownership and irreversible constraints.
+- `docs/architecture/resource-and-data-policy.md` defines bounded queues, data classes, redaction, terminal-content non-persistence, and proof acceptance rules.
+- `docs/architecture/terminal-host-provenance.md` records pinned terminal-component revisions, retained components, patch policy, and artifact provenance requirements.
+- `docs/architecture/terminal-host-spike-evidence.md` defines the mandatory in-terminal 2×2 proof workloads, measurements, and acceptance invariants.
+- `docs/architecture/terminal-host-proof-gate.md` defines the non-waivable stop/go acceptance policy and current pending record.
+- `docs/features` explains maintained user-facing feature behavior.
+- OpenSpec and Git carry planning and implementation history.
+- Source comments explain only non-obvious rationale, safety/security invariants, platform constraints, or public semantic contracts. Names, types, and decomposition explain normal control flow.
+
+## Terminal capability boundary
+
+Transparent terminal attachment owns one foreground child and no AddOne surface. It cannot retain inactive terminal state or switch among arbitrary interactive CLIs inside AddOne. Bare-`a1` multi-agent UX may use structured/RPC surfaces without terminal emulation, but arbitrary-CLI tabs require a separate composed-terminal capability with PTY, authoritative terminal state, rendering, input routing, inactive-surface lifecycle, reconnection, and cross-platform certification. That future capability must not silently intercept or replace the transparent path. Explicit launch profiles and transparent fallback must not import, initialize, launch, or connect to composed terminal-host infrastructure.
+
+Composed terminals use a console terminal host that runs inside the user's existing terminal. The host owns pseudoterminal bytes, retained terminal state, keyboard/text/mouse/IME encoding, frame scheduling, and presentation to the containing terminal. AddOne's JavaScript control plane may exchange typed identity, topology revision, capability, lifecycle, status, and recovery messages only; it must not relay terminal output, per-event child input, or rendered cells. A desktop-native window, GPU renderer, Ghostty GUI runtime, Winghostty Win32 runtime, Metal, GTK, and AppKit are postponed and are not required for the in-terminal product.
+
+A tab owns a revisioned split tree. Each leaf pane references one PTY-backed terminal session. Structured/RPC agents remain semantically separate and may not derive state from ANSI text, terminal timing, or screen content. Native source ownership lives outside `src/` when introduced; packaged host selection is governed by release/package owners. Existing architecture tests reject terminal-host hot-path bytes in JavaScript protocol code, terminal inference in structured runtime code, composed imports from explicit launch modes, and replacement lightweight terminal parsers/renderers.

package/docs/architecture/resource-and-data-policy.md

@@ -0,0 +1,55 @@
+# Multi-agent resource and data policy
+
+This policy is mandatory for the multi-agent workspace. It prevents one adapter, terminal pane, recovery record, or proof artifact from exhausting the workspace and prevents accidental persistence of credentials or terminal streams.
+
+## Resource budgets
+
+Budgets are minimum defaults, not promises of capacity. An implementation may lower them per agent, adapter, pane, host, or platform, but may not silently remove a limit.
+
+| Resource | Default budget | Required outcome on breach |
+|---|---:|---|
+| Structured event payload | 64 KiB | Reject only that event and preserve diagnostics |
+| Structured snapshot payload | 1 MiB | Reject resynchronization and mark the agent degraded |
+| Structured attachment payload | 2 MiB | Reject only that attachment |
+| Queued structured events per agent | 256 | Apply negotiated pause, rejection, compaction, or disconnect |
+| Concurrent structured commands per agent | 4 | Reject or queue deterministically with a capability explanation |
+| Reconnect replay per adapter | 1,024 events | Stop replay, request a snapshot if available, or mark discontinuity |
+| Native-host control message | 1 MiB | Close the incompatible protocol channel without touching panes |
+| Native topology nodes per tab | 1,024 | Reject the topology mutation atomically |
+| Terminal sessions per host | 64 | Reject additional sessions as unsupported capacity |
+| Terminal launch arguments | 1,024 | Reject that launch request |
+| Terminal environment entries | 512 | Reject that launch request |
+| Retained terminal model per pane | Host-defined, always bounded | Apply documented compaction, backpressure, pause, or termination |
+| Scrollback per pane | Host-defined, always bounded | Compact from oldest data first without cross-pane mutation |
+| Proof evidence file | 16 MiB | Reject and request summarized evidence |
+| Diagnostic payload | 256 KiB | Redact, truncate, and retain enough evidence for the failed operation |
+
+Every asynchronous consumer must implement a finite queue or window. Backpressure must isolate the offending agent/pane and must not block unrelated identities.
+
+## Data classification
+
+| Class | Examples | Storage policy |
+|---|---|---|
+| Workspace metadata | IDs, names, lifecycle, capability versions, topology revisions, recovery references | May persist in the control store |
+| Structured payloads | Messages, tool calls, snapshots, attachments | Bound and process; persist only under a future typed retention policy |
+| Terminal content | PTY bytes, scrollback, selection, rendered cells | Never persist in AddOne's control store or diagnostics |
+| Host topology metadata | Window/tab/pane/session IDs, layout shape, dimensions, revision | May persist; not terminal content |
+| Native proof evidence | Artifact hashes, source revisions, workloads, latency/resource measurements, paint diagnostics | May persist in versioned evidence files without terminal content |
+| Environment values | `PATH`, profile overrides, arbitrary launch environment | Do not persist; treat as potentially sensitive |
+| Credentials and tokens | API keys, OAuth tokens, cookies, auth files, passwords | Never copy, log, or persist outside the owning agent/profile |
+| Authentication state | Pi profile auth, provider sessions, platform keychains | Owned only by the selected agent/profile |
+| Logs and diagnostics | Failure codes, bounded lifecycle evidence, sanitized status | May persist after classification and redaction |
+
+Sanitization must classify before logging or storing. Unknown or untyped values are potentially sensitive by default and must not be persisted. Terminal bytes must never be written to logs as a debugging shortcut.
+
+## Required architectural outcomes
+
+- Structured/RPC semantics must not be inferred from ANSI text, terminal timing, or visual content.
+- Native-host protocol code must not carry PTY bytes, per-event child input, rendered cells, cell grids, framebuffers, or screen buffers.
+- `a1 pi` and `a1 sandbox` must not import, initialize, launch, or connect to composed terminal-host infrastructure.
+- Transparent direct attachment must remain independent of composed infrastructure and must not relay terminal data.
+- Recovery records store identity and bounded references, not terminal streams, authentication material, or arbitrary environment values.
+- A failed in-terminal 2×2 proof cannot be waived to merge composed infrastructure.
+- Proof automation must not launch, focus, drive, resize, or close terminal applications on an active workstation.
+
+The executable repository policy tests cover these invariants alongside the architecture checker.

package/docs/architecture/terminal-host-proof-gate.md

@@ -0,0 +1,32 @@
+# In-terminal 2×2 proof gate
+
+The composed-terminal proof is a stop/go gate. AddOne must not merge or productize composed terminal panes until the exact in-terminal spike artifact passes both technical and physical acceptance.
+
+## Go criteria
+
+A `go` decision requires all of the following:
+
+1. Every mandatory workload in the terminal-host evidence schema passes.
+2. The proof runs inside an existing terminal without creating a desktop window.
+3. The exact artifact is tied to pinned AddOne and terminal-component revisions.
+4. Automated evidence came from an isolated worker.
+5. The physical verdict is `accepted` through user-controlled manual validation or an attested isolated disposable worker.
+6. Input-to-process p95 latency is at most 16 ms.
+7. Output-to-present p95 latency is at most 33 ms.
+8. Missed frames are zero.
+9. Resize paint gaps are zero.
+10. No active-workstation terminal automation occurred.
+11. The recorded evidence schema validates without contradictory summaries.
+
+## Stop criteria
+
+Any failed, missing, incomplete, contradictory, physically unverified, or threshold-exceeding result is `stop`. A `stop` result:
+
+- forbids production composed-terminal integration;
+- forbids milestone merge for composed-terminal work;
+- cannot be waived by changing thresholds after evidence collection;
+- preserves structured-agent and transparent-mode work as independently usable;
+- stops composed-terminal work instead of starting a custom rendering/input remediation loop;
+- prevents investment in a postponed desktop-native application shell.
+
+The executable decision is `evaluateNativeSpikeGate` in `src/foundation/native-host-protocol/proof-gate.ts`. The current acceptance record is `openspec/changes/evolve-bare-a1-into-multi-agent-workspace/evidence/terminal-spike-acceptance-record.json`; it remains pending until task 5.6 records a physical verdict for exact artifact bytes.